Esri Software Products Affected by TLS 1.2 Implementation

As part of improving ArcGIS Online security, Esri will require TLS 1.2 connections for ArcGIS Online services in February 2019. Esri software that connects to ArcGIS Online will be affected by this change. To ensure continued access to ArcGIS Online services, you must take action prior to the implementation of TLS 1.2.

Esri software that requires action includes ArcGIS Desktop and applications built on and extending ArcGIS Desktop, ArcGIS Enterprise, applications built with ArcGIS Engine (ArcObjects), and partner extensions that access ArcGIS services. Refer to the list of affected and unaffected Esri software products below for more information about specific product releases.

Affected Products

Desktop

ArcGIS Pro

2.0 - 2.3

Supports TLS 1.2

1.2 - 1.4.1

Action Needed: These versions are all retired. You are encouraged to upgrade to a more recent version of ArcGIS Pro. If you are unable to upgrade, refer to the instructions for setting TLS 1.2 support through the operating system.

ArcMap | ArcCatalog | ArcScene | ArcGlobe | ArcReader

Action Needed: The operating system needs to have a version of .NET that supports TLS 1.2. If .NET 4 cannot be installed, then Microsoft TLS patches for .NET 3 may need to be installed. If you are unable to install the patches (recommended), instructions for setting TLS 1.2 support through the operating system are provided but still require the presence of a version of .NET that supports TLS 1.2.
How To: Configure Windows to use TLS 1.2 for ArcGIS Desktop

ArcGIS Runtime SDK for WPF

ArcGIS Applications

ArcGIS Earth

1.5 - 1.9

Supports TLS 1.2

1.0 - 1.4

These versions are all retired, you are encouraged to upgrade to a more recent version of ArcGIS Earth. If you are unable to upgrade, refer to the instructions for setting TLS 1.2 support through the operating system.

Operations Dashboard for ArcGIS (Windows)

Web AppBuilder for ArcGIS (Developer Edition)

Apps built with Web AppBuilder for ArcGIS (Developer Edition) do not need to be redeployed. Deployed apps rely on the browser being used to make requests over TLS 1.2. Modern browsers on modern operating systems will do this, but older systems, such as Windows XP, may not do this. If you are working with operational layers hosted outside of ArcGIS Online, your server will need to support TLS 1.2 to connect with and add data to ArcGIS Online.

For public-facing servers, the SSL Labs - SSL Server Test tool can be used to validate supported TLS versions.
For internal services, the IISCrypto tool can be used to validate supported TLS versions.